Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Ak3yRlTnvFwjIczniznYHw3_grA.roa
File: Ak3yRlTnvFwjIczniznYHw3_grA.roa (raw, json)
Hash identifier: xo8wt5EZjx9fG0in9hB6BBt5Jjr8ONbodt5H94/u34Q=
Subject key identifier: 02:4D:F2:46:54:E7:BC:5C:23:21:CC:E7:8B:39:D8:1F:0D:FF:82:B0
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C7285AC6E4B2AB4347730C6E06A2
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Ak3yRlTnvFwjIczniznYHw3_grA.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16190
IP address blocks: 5.134.86.0/23 maxlen: 24
217.113.0.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c7:28:5a:c6:e4:b2:ab:43:47:73:0c:6e:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=024df24654e7bc5c2321cce78b39d81f0dff82b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:96:2b:43:6e:2a:0c:18:c7:46:f5:14:ff:
b3:25:c8:1c:69:c4:4a:54:ea:81:87:a0:1e:d9:1b:
02:d7:4a:c1:b9:26:ee:36:de:6f:c4:9b:a4:82:a0:
68:75:6a:8a:20:7b:6e:60:ee:21:7e:e2:20:ee:48:
89:9c:dd:67:9b:13:b7:b2:8a:aa:c3:2d:66:93:08:
c5:96:d4:27:50:42:13:86:71:12:19:52:cb:47:2a:
76:f3:20:f3:08:c0:69:29:f4:07:7e:47:5e:94:28:
92:43:ea:64:af:6c:31:49:65:eb:e6:1b:b2:2f:e8:
8a:bb:99:68:1b:d3:1f:75:a7:a6:68:de:c3:51:92:
3d:6a:f5:ee:8b:19:28:4d:40:85:96:ae:36:b5:2c:
51:25:9c:7d:eb:5b:5b:64:82:a6:b8:ed:3f:8f:8b:
ba:00:fe:f9:19:03:f4:1f:9a:82:09:8d:6e:b7:75:
08:5a:e7:09:b0:3b:32:fb:de:10:08:dc:b7:77:fa:
8d:1b:b7:1a:2a:9c:e2:30:5e:e2:5d:ce:5b:c7:20:
08:51:93:f2:1d:b2:22:25:fa:e8:32:f6:d9:bb:4b:
c8:a4:8d:11:e8:ee:e0:5f:f8:e5:dc:cd:56:d1:26:
8a:c5:a7:8b:29:04:07:ee:d0:7d:b3:6f:41:42:bc:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:F2:46:54:E7:BC:5C:23:21:CC:E7:8B:39:D8:1F:0D:FF:82:B0
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Ak3yRlTnvFwjIczniznYHw3_grA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.86.0/23
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
41:ac:d2:a5:72:7a:ad:41:4f:97:52:fc:e2:09:56:03:32:8d:
a9:3f:45:59:95:bd:ce:f7:35:40:e0:4b:44:c8:0e:7f:89:fd:
ad:17:ce:24:66:ec:22:58:72:6d:44:17:ac:cf:e9:0e:4a:0e:
e4:72:30:59:da:f2:04:54:db:c8:e6:a9:ff:8d:96:90:b4:ad:
c3:e4:4d:87:70:f6:65:0b:96:fd:f1:7a:c1:94:39:81:f3:c8:
e0:b3:1f:88:77:8d:d7:d6:88:b9:1b:c2:bc:94:2c:e1:9f:4a:
d3:a9:77:74:40:4d:fd:df:6a:a8:5c:df:b5:e5:4d:2b:31:b8:
36:61:83:d3:77:b6:51:9c:71:22:de:65:fd:5b:28:8e:ec:c8:
9c:bb:31:dc:cd:0e:1f:06:81:44:99:16:8c:68:b3:70:58:b2:
42:1a:30:98:c6:89:d2:48:95:2e:43:94:ed:2f:60:c8:6f:ae:
84:19:88:d2:ce:81:c9:1b:35:d0:9e:c4:62:12:03:58:3c:2c:
6c:5b:b9:d8:d0:62:2b:67:8f:55:73:11:6a:2a:89:cb:3c:f0:
da:94:56:07:a6:04:8d:df:43:2b:f1:4e:e7:4a:44:de:59:2c:
e8:6e:1a:7d:b0:fd:50:bd:86:9e:5b:b6:18:1b:18:26:b0:37:
f3:0b:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:55:55 2025 by rpki-client